Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

Note that this patch is not available for unsupported Service Packs.

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

Note, that this patch is not available for unsupported Service Packs.

The remote host is running a version of Windows Media Services that is potentially affected by a remote code execution vulnerability when processing specially crafted media files.

The remote Windows host contains a version of the Windows Media Format Runtime or Windows Media Services that is affected by multiple vulnerabilities :

  - The ASF parser has an invalid free vulnerability.
    A remote attacker could exploit this by tricking a     user into opening a specially crafted ASF file, which     could lead to arbitrary code execution. (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.
    A remote attacker could exploit this by tricking a     user into opening a specially crafted MP3 file, which     could lead to arbitrary code execution. (CVE-2009-2499)

ID	Name	Product	Family	Severity
5167	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Vista / Server 2008)	Nessus Network Monitor	Generic	medium
5166	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 64-bit)	Nessus Network Monitor	Generic	medium
5165	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 32-bit)	Nessus Network Monitor	Generic	medium
5164	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Server 2003)	Nessus Network Monitor	Generic	medium
5163	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows 2000)	Nessus Network Monitor	Generic	medium
5153	Windows Media Services RCE (MS09-047)	Nessus Network Monitor	Generic	medium
40890	MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2009-2498

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

high